CVE-2007-2087

CNStats 2.12 contains multiple PHP remote file inclusion vulnerabilities that let an attacker execute arbitrary PHP code via a URL in the bn parameter to reports/who_r.php or reports/who_s.php when register_globals is enabled and .htaccess is not recognized. CVSS v2 base score 6.8 (Medium) with N...